Nullcon Berlin 2023 | Security Journey In French Network Access Controller by Baptiste David

This talk covers network access controllers, specifically focusing on Alcasar, an open-source NAC software used to manage open Wi-Fi access points. The speaker discusses the general security mechanisms of NAC systems and demonstrates vulnerabilities that can be exploited to control the NAC, execute fake authentication, and retrieve users' cleartext passwords. This presentation illustrates various security flaws that enable the circumvention of protective measures and provides insights into the latest version of Alcasar, highlighting both the corrections made and areas that require further improvement.